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TITLE: SYSTEM AND METHOD FOR DEBUGGING SYSTEM-ON- 
CHIPS 

FIELD OF THE INVENTION 
The present invention relates to a system and method for debugging embedded 
cores based system-on-chips (SoCs), and more particularly, to a system and method for 
debugging complex SoCs by utilizing scan chains contained in individual processor 
blocks. 

BACKGROUND OF THE INVENTION 

Since the 1990 5 s, integrated circuit (IC) design has evolved from a chip-set 
philosophy to an embedded core based SoC concept. An SoC IC includes various 
reusable functional blocks, such as microprocessors, interfaces, memory arrays, and 
DSPs (digital signal processors). Such pre-designed functional blocks are commonly 
called "IP cores", "cores", or "blocks", and will collectively be referred to hereafter as 
"functional blocks" or simply, "blocks". The resulting SoCs have become quite complex. 
Moreover, the techniques used in the design of these SoCs have not scaled with the 
complexities of chip designs. That is, SoCs are currently designed by combining 
functional blocks from different vendors into a single design. Prior to their incorporation 
on the SoC, these functional blocks typically will have been subjected to various 
production testing procedures, to include scan chain tests. Scan chain testing is well- 
known in the prior art and permits determining the internal states of various memories 
and registers contained on the functional block. In addition to prior testing of the 
component functional blocks, the interfaces between these blocks are functionally 
verified by various well-know techniques. Frequently, problems in the resulting SoC are 
encountered in spite of these two levels of testing. Moreover, if there are problems in a 
design after the device has been fabricated, it may be extremely difficult to determine the 
cause of the problems. This difficulty can be attributed to the number of functional 
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blocks that are potential sources of the problem and the lack o'f visibility of the internal 
operation of the SoC device. Additionally, the operation of the device can differ 
significantly from the simple functional vectors that are typically used to verify the 
interfaces of the functional blocks. 

5 Various prior art methods exist whereby designers take preventive steps for 

avoiding problems with their SoC designs. Preventive steps include writing many 
vectors to check the functionality of a device and running code coverage tools to evaluate 
the test results. In spite of such efforts, functional problems do occur in fabricated 
devices. The likelihood of functional problems occurring increases with the complexity 
10 of the SoC. For such complex systems, it is virtually impossible to write vectors to test 
all the different combinations of functional operation of functional blocks. Moreover, 
there may be functional features that the designer did not think about testing. Further, the 
functional problem may occur after extended periods of operation and accordingly cannot 
be easily detected by running simple test vectors. 

15 When functional problems do occur with fabricated SoCs, designers attempt to 

determine the cause by observing the state of internal registers, internal memories, or by 
monitoring the outputs of the pins to the device (e.g., by various prior art means such as 
test probing of the device pins as well as more sophisticated methods employing 
computer driven debugging interfaces). Often, there is insufficient visibility to the 

20 internal state of the SoC device. In such cases, the designer must speculate as to what the 
cause of the functional failure is. As a result, it may take several revisions to the circuit 
design before the problem is corrected. 

Lacking in the prior art is a more accurate means of determining the internal state 
of an SoC device to thereby better determine the nature of a failure and thereby more 
25 efficiently effect a remedy. 

SUMMARY OF THE INVENTION 

Large, complex SoCs comprise interconnections of various functional blocks. 
Such functional blocks contain scan chains that are used for their individual production 
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testing. The present invention utilizes these scan chains as a tool in the debugging of 
these SoCs by providing the internal contents of registers and memories contained on the 
SoC device. Accordingly, both hardware and software designers are provided a means to 
observe the effect of their designs on the internal operation of the SoC device. The 
invention is compatible with current integrated circuit design methodology and requires 
minimal area on the SoC for support circuitry. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Various embodiments of the present invention will now be described in detail in 
conjunction with the annexed drawings, in which: 

Fig. 1 is a block diagram of an embodiment of the invention wherein scan chains 
contained on individual functional blocks are used in the debugging of the SoC; 

Fig. 2 is an illustration of an exemplary timing operation for debugging the SoC 
in accordance with an embodiment of the invention; 

Figs. 3A and 3B are block diagrams of the clock control circuitry for functional 
blocks in accordance with two embodiments of the invention; 

Fig. 4 is a block diagram of the debugging control circuitry in accordance with an 
embodiment of the invention; and, 

Fig. 5 is a block diagram illustrating processing of special considerations relating 
to the debugging process in accordance with an embodiment of the invention. 

Figs. 6A and 6B are illustrations of exemplary I/O interfaces to a debugging 
system in accordance with an embodiment of the invention. 

DETAILED DESCRIPTION 
Figure 1 illustrates an embodiment of the invention applicable for debugging 
SoCs. As shown in Figure 1, SoC 102 includes three functional blocks (functional block 
1, functional block 2 and functional block 3; represented by item numbers 104, 106 and 
108, respectively). Figure 1 is intended to be a simple example of an SoC as there 
frequently are far more functional blocks in an typical SoC. Each functional block may 
contain one or more scan chains. For simplicity, Figure 1 shows only one scan chain 
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(item numbers 1 10, 1 12 and 1 14) in each functional block. These scan chains correspond 
to the chains (or subsets of the chains) used in production testing of the device. By way 
of example, scan chain 1 12 is used in the production testing process of functional block 
2). 

In the embodiment of the invention illustrated in Figure 1, outputs from the 
various scan chains are multiplexed to a single output (debug scan out 116) from which 
the internal state of the device can be observed. An input (chain select 1 18) is fed to a 
decoder 120 to generate the enable signal (i.e., item 122 for chain 2) to cause the scan 
chain to be processed. In this embodiment the total number of enable signals corresponds 
to the total number of scan chains in the SoC design. 

Scan chain 2 (item 1 12) of functional block 2 (item 106), is shown expanded in 
the inset of Figure 1. Flip-flops 124 operate as normal registers until configured as a scan 
chain for debugging - as is done normally in the production process testing of functional 
block 2. As illustrated in Fig. 1, the prior art loading of these registers is driven by the 
presence of an ATE scan enable active signal 126. In the illustrated embodiment these 
registers are also so configured during the invention's debugging of SoC 102 (being 
driven by the presence of a debug enable signal 128 AND'd with chain 2 enable signal 
122). The register 124 contents are shifted out through debug scan out 116. In additional 
embodiments of the invention, the mode select signal 130 controls whether the register 
contents are re-initialized with their current contents (to allow operation of the device to 
continue normally after the internal state is observed) or loaded with new contents (to 
allow operation of the device to proceed with a new state after the internal state is 
observed). Since the scan chains already exist for production fault coverage testing of the 
functional blocks, minimal additional chip area is required to support this embodiment of 
the invention. Additionally, this embodiment is functionally compatible with existing 
design methodology for scan testing of devices. 

A debug and clock control block 140 controls the operation of the SoC device in 
debug mode. Debug mode is triggered when a debug trigger signal 142 is activated. The 
debug trigger signal can be sourced from internal breakpointing logic on the SoC or from 
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an external debug input pin to the SoC, as are well-known in the prior art. The debug 
enable signal 128 configures the individual register elements 124 in the functional blocks 
as scan chains when a scan chain is selected for debugging (e.g., chain enable active 122 
for chain 2 as illustrated in Figure 1). A debug ready signal 144 mirrors the debug enable 
signal 128 and indicates to the external environment when the internal state of the SoC is 
ready to be observed. The normal operating clocks for all the blocks (145 for block clock 
1, 146 for block clock 2, 147 for block clock 3) are halted when the debug trigger signal 
142 is activated. A debug ack signal 148 allows the external environment to control 
when the scan chain contents are actually shifted out. When debug ack signal 148 is 
activated, the selected block clock switches to a scan clock 150, which clocks out the 
contents of the selected scan chain. 

Figure 2 illustrates the timing operation for the embodiment of the system 
depicted in Figure 1 . When the debug trigger signal 142 is activated, it is synchronized to 
the normal operating clock for each block. This generates the clock halt signal for each 
block. Figure 2 illustrates the timing of a clock 2 halt signal 202 generated for functional 
block 2. As each functional block may be operating on a different clock domain, there is 
a different clock halt signal for each block. 

When all the clocks in the SoC are halted, the combined signal is synchronized to 
the scan clock 150. This causes the control circuitry to trigger the debug ready 144 and 
debug enable signals 128. At this point, the registers in the selected scan chain (e.g., 124) 
are configured for scan mode operation. The user then triggers the debug ack signal 148 
from the external environment to cause the selected scan chain contents to be shifted out. 
The debug ack signal 148 is held active long enough to scan out the entire contents of the 
scan chain; the number of scan cycles corresponds to the number of cells in the selected 
scan chain. 

If the contents of more than one scan chain are to be observed, the debug trigger 
signal 142 is held active after scanning out the contents of the selected scan chain. The 
chain select signal 1 1 8 is then modified by the user to thereby select the new scan chain. 
Then, the newly selected scan chain is shifted out by activating the debug ack signal 148 
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as described previously. In this embodiment of the invention, it is envisioned that the 
user would have conventional diagnostic tools available to help select the scan chain(s) to 
be invoked. Thus for example, the type of error occurring in the SoC would, with the 
aide of prior art diagnostic literature for a suspect malfunction block, direct a user to 
5 those scan chains which would potentially help diagnose the problem. 

It should be noted that the present invention is not limited to applications in which 
malfunction hardware is being diagnosed. By way of example, the present invention 
would be useful to a software programmer who is attempting to debug his code by 
examining intermediate conditions within the SoC device (e.g., in seeking to determine 
1 0 why his driver software is not functioning properly). 

When the debug trigger signal 142 is disabled, the debug enable 128 and debug 
ready signals 144 are disabled by the control logic. This causes the clocks to the 
functional blocks to be re-synchronized to their normal operating clocks 146. 

Figure 3 A shows the clock control circuitry for controlling a block clock (block 2 
15 clock 146) in an embodiment of the invention in which the illustrated circuitry is 

implemented for each separate clock domain in the SoC. Figure 3B depicts the clock 
control circuitry for an additional embodiment of the invention where two functional 
blocks share the same clock. This corresponds to the situation illustrated in Figure 2 
where block 2 clock (146) and block 3 clock (147) are both under the clock domain of 
20 normal block clock 204. In this situation, and as illustrated in Fig. 3B, the front end of 
the clock control circuitry can be shared by both functional blocks. Separate clock 
multiplexers (items 304 and 308) allow the clocks to the different scan chains to be 
controlled. 

Figure 4 shows the debug control circuitry of one embodiment of the invention. 
25 The individual clock halt signals (e.g., 202 for clock 2 halt) are gated with the debug 

trigger signal 142 and then synchronized to generate the debug enable 144 and debug 
ready signals 128. 

For simplicity, omitted from Figures 3 and 4 is the presence of a power-up reset 
signal that is inputted to synchronizers (items 306 and 402, respectively), thereby 
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resulting in a "0" output signal from said synchronizers. Use of such a reset signal is 
well-known in the prior art. Its use in the present invention ensures that the debug logic 
is not active at the time the system is powered up. 

As is well known in the art, a functional block may contain cells with state 
5 information that are affected by the debugging process, when they should not be. For 

example, Figure 5 shows nonscan flip-flops 502 and RAM 504 in functional block 2 that 
are clocked when scan chain 2 is shifted out. This could alter the contents of the nonscan 
flip-flops 502 and RAM 504. Since those cells are not re-initialized with their original 
states or loaded with new start states, the operation of the SoC would not proceed 
10 normally after the debugging process. As such, and as illustrated in Figure 5, an 

additional embodiment of the invention disables the clocks to those cells to prevent them 
from being modified by the debugging process. 

Additionally, the debugging process may cause control signals of internal 
bidirectional signals to become active. To prevent multiple cells from driving the 
1 5 bidirectional signal at the same time, a further embodiment of the invention gates the 

control signals 506 with the debug enable signal 128 as shown in Figure 5. 

Figures 6A and 6B each illustrate an additional embodiment of the invention in 
which a debugging computer system 602 receives as inputs various signal conditions 
described above and also supplies various inputs to the SoC 102. These signals are bit 

20 wide with the exception of chain select, whose width is dependent on the number of scan 
chains in the SoC 102. 

As illustrated in Fig. 6A, if there are adequate pins present on the SoC 102, the 
controlling signals can be connected as dedicated pins on the SoC. Otherwise, and as 
illustrated in Fig. 6B, the controlling signals can be connected to a serial test interface, 

25 such as the IEEE 1 149.1 JTAG tap controller 606, to reduce pin count. The hook-up to a 
serial test interface is a well-known industry practice. 

' In a further embodiment of the invention, the system 602 communicates with one 

or more remote computer systems which perform analysis of the scan output data. This 
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communication between such systems can occur via direct modems, internet connection, 
or other well-known prior art methods. 

In additional embodiments of the invention the debugging system 602 provides 
more than just I/O support. With the design of an SoC, the order and number of registers 
used in the construction of the scan chains for production testing of the component 
functional blocks are known. This information is saved to a database that is used by the 
software in the debugging system 602. The debugging system is test equipment or a 
computer that controls the debugging process as illustrated in the timing diagram (Figure 
2) of the present application. 

The debugging system 602 periodically monitors the debug ready signal 144. 
When the debug ready signal 144 is active, the debugging system 602 recognizes that the 
SoC 102 has entered debug mode, either due to a preset breakpoint or triggering of the 
external debug input pin. The debugging system 602 then systematically sets the chain 
select signal 1 18 to select each scan chain (1 10, 1 12, and 1 14) in the SoC 102 or to a 
subset of these scan chains selected by the system operator. The run-time information 
contained in the registers of the SoC 102 is then scanned out through the debug scan out 
signal 116, when the debugging system activates the debug ack signal 148. 

In additional embodiments of the invention, when the mode select signal 130 is 
set to zero, this causes each scan chain (1 10, 1 12, 1 14) to be reinitialized with its current 
state, concurrently as the scan chain contents are read. This provides an effective means 
for observing the internal state of the SoC as it is stepped. After the internal state of the 
SoC has been read into the debugging system, the debugging system's software provides 
the user with control over the next execution state of the SoC. The user modified state 
for the SoC is loaded into the SoC through the debug scan in signal 152 when the mode 
select signal 130 is set to one, and another scan of the scan chain to be modified is 
performed. 

In additional embodiments of the invention, software in the debugging system 
allows the user to efficiently process the internal state information from the SoC 102. The 
debugging system allows the user to trace logic states in the SoC. It also allows the user 
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to concurrently run a software model of the SoC, enabling the user to debug by 
comparing the expected operation of the SoC with its actual operation (such software 
models are typically obtainable from the SoC vendor). In additional embodiments, the 
software also has the capability of pattern detection, thus allowing the user to detect when 
5 the registers or a subset of the registers have a certain state. The debugging system can be 

programmed to automatically check the internal state of the SoC at periodic intervals and 
compare the run state of the device with expected register contents. 

The above-described steps can be implemented using standard well-known 
programming techniques. The novelty of the above-described embodiment lies not in the 

10 specific programming techniques but in the use of the steps described to achieve the 

described results. In a client/server environment, such software programming code may 
be stored with storage associated with a server. The software programming code may be 
embodied on any of a variety of known media for use with a data processing system, such 
as a diskette, or hard drive, or CD_ROM. The code may be distributed on such media, or 

15 may be distributed to users from the memory or storage of one computer system over a 

network of some type to other computer systems for use by users of such other systems. 
The techniques and methods for embodying software program code on physical media 
and/or distributing software code via networks are well known and will not be further 
discussed herein. 

20 It will be understood that the forgoing description of the invention is by way of 

example only, and variations will be evident to those skilled in the art without departing 
from the scope of the invention, which is as set out in the appended claims. 
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